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Issue before the Board of Appeals: 

Examiner misunderstands and misconstrues the nature and scope of the claims 
5 and the problem being solved by the claimed subject matter relative to the problem 
being addressed in the cited prior art or what the prior art teaches individually or in any 
combination. 

Given that lack of understanding of the nature and scope of the claims at issue 
10 relative to the cited prior art, Examiner then proceeds to misapply the Graham v. Deere 
obvious enquiry analysis to the claims. 

Specific reasons for this misapplication of Graham v. Deere obviousness 
analysis by the Examiner are detailed in this Reply Brief. 
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Appellant in this rely brief provides arguments under the following headings: 



Title Page 

A. Claimed Subject Matter Summary 5 

B. The problem being solved by the claimed subject matter: 6 

C. Solution to the problem by the claimed subject matter 6 

D. What the cited prior art teaches 8 

E. Structural differences between the claimed subject matter 

and the cited prior art 9 

F. Utility and useful of these structural differences between 

the cited prior art and the claimed subject matter. 12 

G. Response to Examiner's Assertions and Statements in 

the Examiner's answer dated 5-26-201 0. 1 2 

H. Analysis how the examiner misapplies the 

Graham v. Deere obvious enquiry analysis. 14 

I. Misapplication or the Graham v. Deer Ordinary Skill 

in the art enquiry and misapplication of KSR v. Teleflex 1 9 

J. Summary and Conclusion 20 



A. Claimed Subject Matter Summary 

The claimed subject matter teaches a unique Payment System that facilitates 
payments for goods and services from customers to merchants at the merchant's 
5 point-of-sale (POS) computer systems. The claimed subject matter Payment System is 
unique because: 

(a) The claimed Payment System does not transfer customer private Identity 
(Id) data and bankcard data to the merchant computer systems and thus 

10 eliminates the potential theft of the customer data from the merchant 

systems themselves. 

(b) The claimed Payment System Is unique because it uses the existing 
merchant point-of-sale (POS) computer systems without any updates, 

15 changes, or modifications to them. That is, the use of this claimed subject 

matter Payment System is transparent to the Merchant computer systems. , 

(c) The claimed Payment System is unique because it uses the prior art 
interface to and from the card-issuing banks and is thus transparent to the 

20 card-issuing banks themselves. 

(d) The claimed subject matter Payment System while being transparent to both 
the merchant POS, which originate the payment transaction and being 
transparent to the card-issuing banks which processes the payment 

25 authorization request transactions, it yet provides a Payment System that 

does not transfer customer id data to the merchant systems and thus 
become subject to theft from their systems in any number of ways as had 
been covered in numerous news items on id data theft. 

30 
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B. The problem being solved by the claimed subject matter: 

Based on innumerable news items, data thefts of customer identity including 
their bank and card account numbers from the merchant systems, where those 
5 systems are interconnected on the internet have been occurring regularly and on large 
scales. 

The theft of such data from merchant systems has taken variety of methods and 
approaches based on the security weaknesses in their POS systems and the 
10 supporting infrastructure. One news items described sniffing the data traffic 
transmission between the POS and the merchant processing systems. Another news 
items has been hacking or breaking into the merchant computer systems connected on 
the internet. 

15 The degree, pervasiveness and severity of such data theft has been so 

alarming that the bankcard industry, some years ago, promulgated a new standard of 
security called Payment Card Industry (PCI) standard, popularly known in the security 
industry as PCI standard for the merchant to comply with to address this problem of 
pervasive and large scale theft of identity and bankcard data from the merchant 

20 systems. 

The PCI standard requires the merchants to comply with the requirements of 
security practices of the security industry in an effort to reduce such incidences of Id 
data theft. However, compliance with the PCI standard has provided some security, it 
25 not been successful in eliminating data theft as the hackers have always figured new 
ways to attack and steal such data. 

C. Solution to the problem bv the claimed subject matter 

The claimed subject matter teaches a Payment System that makes possible 
30 payments to merchants from their customers without the merchants ever receiving and 
having the customer Id data as they do now for processing a payment transaction. 
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What the claimed subject matter teaches has never been possible and done before by 
the cited prior art because the payment infrastructure has been built with the merchant 
receiving customer Id and bankcard data as part of a payment processing transaction. 

5 The claimed subject matter takes the same payment infrastructure and makes 

novel and innovative changes to it to create the Payment System of the claimed 
subject matter, yet these changes are transparent to both the merchant and the card 
issuing banks and yet makes possible a payment from customer, their card issuing 
banks to the merchants without giving or transferring for any time customer bankcard 
10 data to the merchant systems. 

Further, the claimed subject matter is not only useful to the customer to prevent 
the theft of their Id data, the primary victims of Id theft, but it is also useful to the 
merchants, as it avoids from them the business liability risk of protecting the customer 

15 data they receive in their possession for processing the payment transaction. Further, 
the claimed subject matter is useful to the bankcard card issuing banks, as they do not 
have to create new account numbers to replace the old numbers once they have been 
stolen or presumed stolen. Thus the theft of id data has created victims of all of these 
entities, the customer, the card-issuing bank and the merchants and their support 

20 intermediaries. 

The claimed subject matter Payment System for the merchants, directly and for 
the bankcard industry indirectly avoids a business liability risk of acquiring and 
protecting and safeguarding customer data in the Internet interconnected world, an 
25 interconnected world, where any mal-intentioned entity anywhere globally has the 
means and wherewithal to be able to break into any computer systems to steal data. 

With the claimed subject matter, which takes the existing prior art payment 
infrastructure and makes novel changes to it that do not alter the merchants processing 
30 payments for getting paid using the same payment infrastructure and the card-issuing 
banks not be impacted by this change, and yet make possible a payment from the 
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customers to their merchants without the merchants receiving the customer Id and 
bankcard data. 

The scope and nature of the claimed subject matter summarized as above has 
5 been totally misunderstood by the examiner and has formed the basis of examiner's 
obviousness 1 03(a) rejections in view of the cited prior art. 

As an illustrative example of Examiner's misunderstanding of the payment 
system of the claimed subject matter, on page 4 and repeated on other pages of the 
10 Answer brief dated 5-26-2010, Examiner makes statements that Rose and/or 
Campisano teach or suggest protection of the bankcard data from the merchant point 
of sale systems. With due respect to the examiner these are entirely inaccurate 
statements as the Rose and/or Campisano do not teach or suggest protection of the 
bankcard data from the merchant computer systems. 

15 

As another illustrative example of Examiner's misunderstanding of adapted prior 
art merchant gateway of the claimed subject matter, on page 4 and repeated on other 
pages of the Answer brief dated 5-26-2010, Examiner makes statements that Rose 
and/or Campisano teach or suggest an adapted prior art merchant gateway. With due 
20 respect to the examiner these are entirely inaccurate statements as the Rose and/or 
Campisano do not teach adapted prior art merchant gateway. 

D. What the cited prior art teaches 

Rose and Campisano are the primary cited prior arts underlying all of these 
25 103(a) rejections The prior art teaches (i) convenience in use of the bankcards by the 
customer and (ii) security in terms of protecting the card number from theft while in the 
possession of the customer. 

The convenience is taught in terms of either a single card that enables use of 
30 multiple cards or even a card-less transaction, using a telephone number as a 
customer identifier in a database that stores multiple bankcard data in a database and 
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be able to select one of these cards at the merchant point-of-sale (POS) systems using 
a PIN. And security in terms of others cannot steal the card number from the 
customer's possession, as the card does not have bankcard data is but a customer 
identifier that maps in the card database to the bankcard data. 

5 

While the cited prior art teaches these two features, the cited prior art does not 
teach or suggest protection of the customer id data from the merchants and merchant 
computer systems themselves contrary to the Examiner's assertions and statements 
on page 4 and other pages of the Examiner's Answer brief dated 5-26-201 0. 

10 

E. Structural differences between the claimed subject matter and the cited 
prior art: 

The structure used in the cited art and claimed subject matter, and their 
15 differences are identified here. There are four such structure items, that of (i) a 
Merchant POS, (ii) a merchant gateway, (iii) a card-database and (iv) a payment card. 
Each of these structure items and their differences are identified here. 

1. Merchant POS: 

20 In Rose and Campisano, prior art, the Merchant POS is modified and adapted 

(i) to provide an interface to a card database where the customer bankcards data are 
stored (ii) to receive the Rose/Campisano customer identifier at the POS and send to 
the card database and receive the actual bankcard data and (iii) and submit that 
received bankcard data for payment processing transaction as they are normally 

25 processed by a Merchant POS. 

In contrast, the claimed subject matter does not rely nor use or make any 
modification to the existing POS in recognition of the humungous logistics and cost of 
modifying merchant POS through out the globe where merchants accept bankcards. 

30 
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2. Merchant Gateway: 

A merchant gateway is a prior art routing mechanism which takes payment 
authorization request transaction records from the merchant computer systems from a 
large number of merchants globally and routs each record to a specific card-issuing 
5 bank based on the 4 digit bank routing number in the bankcard and also routs back the 
corresponding payment approval authorization transaction record from the card-issuing 
banks to the merchants globally. 

Hence a merchant gateway is simply a routing mechanism between the 
10 merchants' computer systems that originate a payment authorization request 
transaction and receive a payment approval notification record and the card-issuing 
banks. There are only a handful, less than six, such routing gateways globally. 

Rose and Campisano do not teach, suggest or make any change to these 
15 routing gateways. In contrast, the claimed subject matter teaches an adapted prior art 
merchant gateway. The claimed subject matter prior art gateway adaptation provides 
(i) a feature to separate traditional bankcard originated payment transaction from the 
claimed subject matter originated payment card transaction, (ii) route the traditional 
bankcard originated payment transaction normally to the card-issuing banks and (iii) for 
20 payment card originated transaction at Merchant POS, interface with a database 
system to send a customer identifier and receive the actual bankcard data from therein, 
substitute that data in the payment authorization transaction record and then normally 
route to the card-issuing banks. 

25 3. Card Database: 

Rose and Campisano teach a card database where the customer can store his 
bankcard data anchored by a customer identifier, each identified by a PIN. This Rose 
card-database is interfaced to and accessed by the Merchant POSs. 

30 In contrast, the claimed subject matter also teaches a similar card database, 

however that card database is interfaced exclusively by the handful of the routing 
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merchant gateways as described above in item (2), which are adapted to have this 
interface, hence called adapted prior art merchant gateway. 

Further, the claimed subject matter card database has logic to receive an 
5 encrypted customer identifier from the merchant gateway, decrypt it to the customer 
identifier that is present in the database, before it can map to the customer bankcard 
data in the card database. 

4. Payment Card: 

10 In Rose, a Rose payment card is used. The Rose payment card has a customer 

identifier that matches to the customer in the card database. In Campisano an entry of 
a customer telephone number in the Merchant POS is used as a customer identifier, in 
lieu of a customer identifier on a card, where the customer telephone number matches 
with the customer identifier in the card database to identify the customer. 

15 

In contrast, the claimed subject matter teaches a payment card, with a customer 
identifier without customer identity data . The customer identifier without customer 
identity data is made up of (i) an encrypted customer identifier, of a customer identifier 
in the card-database and (ii) the encrypted customer identifier is appended with a 
20 reference to an encryption algorithm in the card database. 

That is, the encrypted customer identifier is only present or encoded on the 
substrate of the payment card and is not present in the card-database. When the 
customer identifier w/o customer identity data is received by the card-database, it is 
25 first decrypted using the algorithm reference to get the customer identifier to match to 
in the customer bankcard data in the card-database. 

That is, the Rose and Campisano Customer identifier are not the same as the 
claimed subject matte r customer identifier without customer identity data . 

30 
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F. Utility and useful of these structural differences between the claimed 
subject matter and the cited prior art: 



The utility and usefulness of the above identified structural differences between 
5 the claimed subject matter and the cited art is to teach the Payment System (i) that 
protects the customer bankcard data and Id theft prone data from ever being copied or 
transferred into merchant systems and (ii) to teach a payment system that is 
transparent to the Merchant POSs and the card-issuing banks, and (iii) only requires 
the adaptation of the handful of the merchant routing gateways as described above. 

10 

The cited prior art neither teaches or suggests the claimed functional structure, 
nor teach the results achieved by the claimed subject matter claims. 

G. Response to Examiner's Assertions and Statements in the Examiner's 
15 answer dated 5-26-201 0. 

Through out the Examiner's Answer Brief dated 5-26-2010, Examiner' makes 
assertions and statements that Rose and/or Campisano teach protection of the 
customer Id and bankcard data from the Merchant Computer systems and 
20 Rose/Campisano singly or in any combination teach an adapted prior art merchant 
gateway. 

With due respect to the Examiner's these assertions and statements are entirely 
and wholly inaccurate and predicate the examiner's 103(a) obviousness rejections. 

25 

As an illustrative example of Examiner's misunderstanding of the payment 
system of the claimed subject matter, on page 4 and repeated on other pages of the 
Answer brief dated 5-26-2010, Examiner makes statements that Rose and/or 
Campisano teach or suggest protection of the customer Id and bankcard data from the 
30 merchant point of sale systems. With due respect to the examiner these are entirely 
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inaccurate statements as the Rose and/or Campisano do not teach or suggest 
protection of the bankcard data from the merchant computer systems. 

In Rose and/or Campisano, the IVIerchant POS terminal has been modified to 
5 itself initiate an interface to the card database and send the customer identifier and 
receive the actual bankcard data from the card database that is fetched by the 
merchant POS and received by the Merchant POS systems. Customer then select via 
entry of a PIN to select which one of these bankcards to use, and once that is selected, 
the customer's so selected bankcard data then becomes part of the merchant POS for 

10 the Merchant POS to then assemble a prior art payment authorization request record, 
which record contains the merchant identifier, merchant sales terminal identifier, a 
reference number, time and date along with the customer identity data to include 
customer name and customer bankcard data. Hence it is, and would be impossible in 
Rose/Campisano for the Merchant POS to not have the customer id and bankcard 

15 data as they assemble this payment authorization request record and send this record 
to a prior art merchant gateway. 

As another illustrative example of Examiner's misunderstanding of adapted prior 
art merchant gateway of the claimed subject matter, on page 4 and repeated on other 
20 pages of the Answer brief dated 5-26-2010, Examiner makes statements that Rose 
and/or Campisano teach or suggest an adapted prior art merchant gateway of the 
claimed subject matter. With due respect to the examiner these are entirely inaccurate 
statements as the Rose and/or Campisano do not teach adapted prior art merchant 
gateway. 

25 

Examiner misunderstands the nature of how the prior art payment systems 
operate in equating the merchant POS system with the adapted prior art merchant 
gateway of the claimed subject matter. The Merchant POS and the prior art merchant 
gateway and the adapted prior art merchant gateway are entirely different entities and 
30 systems as had been described in detail in Section E above of the Reply Brief. 
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As another illustration of the Examiner's misunderstanding and misstatements, 
as on page 6 and repeated on other pages of the Answer brief dated 5-26-2010 are in 
equating a machine readable code or signal on the magnetic strip of the bankcard 
representing a customer identifier which maps to and is used to identify a customer in a 
5 card database with a customer identifier that is encrypted with an encryption algorithm 
and then appends a reference to the encryption algorithm, even though that is present 
or encoded as electrical signals on the payment card, which when sent to the card 
database, as this requires first decryption of the encrypted customer identifier with the 
same algorithm as that is referenced in the encrypted identifier to get the decrypted or 
10 the original customer identifier which then maps to the card database. 

Examiner misunderstands in equating mere encoding of a customer identifier on 
the magnetic strip by electrical signals, similar to when a bankcard data is encoded on 
the magnetic strip of the bankcard and equates that to encryption of the customer 
15 identifier before encoding on the magnetic strip of the payment card and then encoding 
the encrypted customer-identifier with reference to the encryption algorithm on to the 
magnetic strip as electrical signals. 

Examiner with due respect, fails to understand and equates encoding a data 
20 string in the form of electrical signals on a magnetic strip in calling that an algorithm 
equal to the encryption algorithm of the claimed subject matter. Examiner 
misunderstands in that the claimed payment card does not have an algorithm present 
on the magnetic strip but reference to an algorithm from one of many algorithms 
present in the card database computer system that was used for encrypting the 
25 customer identifier that is present in the database. 

H. Analysis of how the examiner misapplies the Graham v. Deere obvious 
analysis. 

30 Rose and Campisano do no teach protecting the bankcard data from the 

merchant systems themselves. Examiner fails to understand the nature and scope of 
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the claims for such a Payment System in comparing the claimed features to the prior 
art as the main cited prior art, that of Rose and Campisano, focused on customer 
convenience in use of bankcards at POS does not even begin to address this issue 
and problem and thus cannot and does not teach or make obvious the claimed subject 
5 matter. 

Application of Graham v. Deere obvious analysis is a four sequential step 
enquiry. The first leg of this enquiry is nature and scope of the claims in view of 
the prior art. 

10 

Under this first leg of the enquiry, the distinctions and differences between the 
claims and the prior art are discerned and if such differences are such that prior art 
does not teach the same subject matter or is on a different subject matter altogether, 
the claims are prima facie not obvious. If the claims are prima facie not-obvious under 
15 this enquiry, there is no need to pursue and proceed to the second leg of the Graham 
V. Deere obviousness enquiry related to the analysis of the claims and differences from 
the prior art in view of the ordinary skill in the art person. 

If some of the elements of the claimed subject matter are so novel that they are 
20 not present in any single prior art or a combination, then the claims are prima-facie not 
obvious. As a simplified illustration of this first leg of the obviousness enquiry. If the 
prior art teaches solution to problem A and the claims teach the solution to a problem B 
and where problem A and B are unrelated then the claims are prima facie not obvious 
over the prior art. 

25 

Examiner misunderstands and thus misapplies the first leg of the enquiry for the 
following specific reasons; 

The problem being addressed by the claims and the problem being 
30 addressed by the cited prior art. 
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Now addressing what is the problem being addressed by the claims and the 
problem being addressed by the cited prior is to know and learn what is a bank issued 
bankcard and how such a bankcard driven payment transaction at a merchant POS 
operates and is handled by the POS and the merchant systems. 

5 

The nature of a bankcard driven payment transaction (either a credit or a debit 
card) is and has been that the bankcard data is given/transferred /made available to 
the merchant computer systems and or merchant employees at a merchant point of 
sale (POS) for the merchant systems then to process a payment transaction from the 
10 card issuing bank to the merchant bank using a card authorization and fulfillment 
network. 

That is, there is no other way to make a payment to merchant without giving 
them the bankcard data by a number of means disclosed in the cited prior art. 

15 

The cited prior art teaches solution to problems that relate to and make the use 
of bankcards by their customers at the merchant POS more secure as well as 
convenient. The prior art teaches bankcard security in terms of others cannot steal the 
card number from the customer's possession and convenience in terms of either a 
20 single card that enables use of multiple cards or even a card-less transaction, using a 
telephone number as a identifier in a database that stores multiple bankcard data the 
multiple card in a database and be able to select one of these cards at the merchant 
point-of-sale (POS) systems, using a PIN that identifies each bankcard. 

25 In contrast, the nature and scope of the claims are directed how to 

conduct and make a payment transaction without ever 
giving/transferring/making available bankcard data to the merchant systems. 

To accomplish that unique and novel objective, the claims teach the use of (i) 
30 an adapted prior art merchant gateway and (ii) a non-bank issued and thus a non- 
bankcard -"payment card" working in conjunction with each other. The adapted prior 

16 



art merchant gateway is an element present in the claimed subject matter and that is 
not taught by any cited prior art or any combination of the cited prior art. 

The adapted prior art merchant gateway, takes a prior art merchant gateway 
5 and modifies it or adapts in significant ways for it to be able its perform both the prior 
art gateway functions that handle bank issued bankcards and also at the same time be 
able at the same time to handle and process "payment card a non-bankcard originated 
payment transactions". Thus the adapted prior art merchant gateway enables some 
merchant and bankcard customers to use their bankcard in a manner as they use now 
10 and also enable the "payment card" customers to make payments at the same 
merchant POS using the payment card. 

Examiner fails to understand this critical distinction in the nature and 
scope of the claims against the cited prior art. The ordinary skill person leg of the 
obviousness enquiry is relevant only if the claimed subject matter and the cited prior art 
solve the same problem and if all of the elements of the claimed subject matter are 
present in the cited prior art. If the prior art does not even begin to address the problem 
being solved by what is claimed then there is no reason to go to the second leg of the 
enquiry of the person of ordinary skill in the art. 

Now addressing the nature and scope of the claims of the claimed subject 
matter and the cited prior art, for each of the independent claims: 

independent claim 106 teaches elements (b) to (f) that teach the use of an 
25 adapted-prior-art-merchant-gateway and that are not taught by any cited prior art 
combination. 

Neither Rose or Campisano or Rose and Campisano teach or fairly suggest the 
use of a adapted prior art merchant gateway as they are solving an entirely different 
problem and not the problem being solves by the claim 106, as also articulated in the 
30 preamble of the claim. 
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Examiner by equating the "adapted prior art merchant gateway" working with 
the payment card system data base with the Rose and Campisano's Remote 
Database working with the ATM/POS, fails to understand the construction and the 
function and the purpose of the "adapted prior art merchant gateway". An "adapted 
5 prior art merchant gateway" not only has a unique function, it has unique interfaces to 
accomplish that unique function which are not taught or even fairly suggested by any 
combination of the cited prior art of Rose and Campisano. 

Independent claim 109 teaches elements (c) features that are not taught by any 
10 cited prior art combination. Examiner errs and equates under the broadest reasonable 
interpretation in view of the specification the term "encodes a customer identifier 
without customer identity data and equates that with the industry standard technology 
of encoding a number on the magnetic strip by using electro-magnetic signals 
representation of the bankcard data. That is, examiner confuses and equates the 
15 phrase "encoded with an algorithm" and equates that with the encoding of a number on 
a magnetic strip by electrical signals. 

Independent claim 114, a method version of the independent claim 109 teaches 
elements (b) features that are not taught by any cited prior art combination. Examiner 

20 equates under the broadest reasonable interpretation in view of the specification the 
term "encoded with an algorithm" and equates that with the industry standard 
technology of encoding a number on the magnetic strip by using electro-magnetic 
signals representation of the bankcard data. That is, examiner confuses and equates 
the phrase "encoded with an algorithm" and equates that with the encoding of a 

25 number on a magnetic strip by electrical signals. 

Independent claim 123, teaches elements (c) features that are not taught by any 
cited prior art combination. Examiner equates under the broadest reasonable 
interpretation in view of the specification and equates that with the industry standard 
30 technology of encoding a number on the magnetic strip by using electro-magnetic 
signals representation of the bankcard data. That is examiner confuses and equates 
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the phrase "encoded with an algorithm" and equates that with the encoding of a 
number on a magnetic strip by electrical signals. 

I. Misapplication or the Graham v. Deer Ordinary Skill in the art person 
5 enquiry and misapplication of KSR v. Teleflex 

The second leg of the Graham obviousness enquiry requires the identification of 
the ordinary skill in the art person and whether such ordinary skill person would 
combine what is taught by the cited individual references and what is commonly known 
10 or is in the purview of the person of ordinary skill in the art to come up with the claimed 
subject matter. 

Hence the relevance of the ordinary skill in the art person enquiry is only 
relevant when the cited prior art teaches the same elements as the claimed subject 
15 matter to determine if the person of ordinary skill in the arts would combine such 
teachings where the KSR has amplified the person of the ordinary skill in the art to use 
common sense in using cited prior art elements absent a teaching, suggestion or 
motivation. KSR does not require a person of the ordinary skill in the art to create 
entirely new elements that did not exist before in the cited prior art. 

20 

The second leg of enquiry is not reached where the first step of the enquiry on 
the nature and the scope of the claims in view of the prior art, shows that the nature 
and scope of the claims is such that that is not taught by the cited prior art or the 
common sense of the person of ordinary skill in the arts. 

25 

The claimed subject matter here, teaches element of adapted prior art merchant 
gateway working in conjunction of a claimed payment card features and the need to 
even protect the ID data of the customer from the merchant computer systems. Since 
these features are not taught or suggested by any prior art and thus the need for the 
30 second leg of the obviousness enquiry and KSR amplification of person of ordinary skill 
in the art does not even arise. 
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J, Summary & Conclusion 

Hence Examiner has erred in applying the Graham v. Deere obviousness 
enquiry analysis in understanding the nature and scope of the claimed subject matter 

5 in misstating that the Rose and/or Campisano teach protection of the customer id and 
bankcard data from the merchant computer systems themselves, and in equating the 
new element "adapted prior art merchant gateway" with the cited prior art in 
Rose/Campisano of an adapted merchant POS working with a card database for 
storage of bankcards, and in equating the encoding the card number or a customer 

10 identifier on a magnetic strip with encoding an encrypted customer identifier w/o with 
an appended algorithm reference. 



15 current claimed subject matter is entirely of a different scope and the current claims 
106-124 are not obvious under section 35 USC 103(a) and Graham v. Deere test 
over the cited combination of the prior art, based on arguments presented in this 
appeal, including the Reply Brief. 



CONCLUSION 



Appellant submits, based on the arguments presented in this appeal, the 



Dated this the 21st day of July, 2010 
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Respectfully submitted. 




Tara Chand Singhal 
Appellant 
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(1) 



REAL PARTY IN INTEREST 

Tara Chand Singhal, applicant/inventor 



5 (2) RELATED APPEALS AND INTERFERENCES 

None 

(3) STATUS OF CLAIMS 

Claims 1-105 have been canceled without prejudice. Claims 106 to 124 have 
10 been rejected in a Final Office Action dated 11/24/2009. Claims 106-124 are pending 
in the Application and are the subject of this appeal. 

(4) STATUS OF AMENDMENTS 

No Amendments after final office action rejection dated 11/24/2009 have been 

15 filed. 

(5) SUMMARY OF CLAIMED SUBJECT MATTER 

The embodiments of a payment card system provide security of the customer 
identity data and bankcard data from the merchant computer systems themselves 
20 when the customer uses bankcards at merchant sales terminals for payment 
transactions from the customer to the merchant. 

To achieve this objective, of protecting the customer private data from the 
merchant systems themselves, whereas that is unachievable in the prior art 

25 bankcard payment transactions at the merchant systems, because the merchant 
point of sale systems create a payment authorization request record that contains (i) 
the customer identity and bankcard data, (ii) meta data of, date, time, and reference 
number, and (ill) merchant terminal identifier, for submission to a card authorization 
network for routing to the card-issuing banks via a merchant gateway, thus the 

30 merchant systems by necessity require the customer identity and bankcard data for 
be able to complete a payment authorization request record data as above, the 
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claimed subject matter achieves that objective by using three unique elements, 
working in conjunction with each other. 

One of these elements is a physical plastic payment card (not a bankcard) 
5 that resembles prior art bankcards. This payment card element does not contain 
anywhere on the payment card, customer identity data. The payment card only has 
an encoded customer identifier without identity data that is meaningful only to a 
payment card system. [Ref., page 6, line 29 to page 7, line 10] 

10 The second element, is an adapted prior art merchant gateway. A prior art 

merchant gateway is a router mechanism that routes the bankcard driven payment 
authorization request to the various card-issuing banks using the first four digits of 
the bankcard number that identifies the card-issuing bank. 

15 The adapted prior art merchant gateway of the claimed subject matter adapts 

a prior art merchant gateway by providing a new logic and a new interface in the 
merchant gateway. The new logic filters the payment card transactions from other 
bankcard transactions and for these payment card transactions uses the new 
gateway interface to interface with an independent payment card system, which 

20 stores the actual customer bankcard data. The new logic and the new interface in 
the adapted merchant gateway sends the customer-identifier to the payment card 
system and receives the actual customer bankcard data for the specific transaction. 
The adapted gateway, on receiving the actual customer bankcard data, then 
assembles and completes a prior art payment authorization request record for 

25 submission to the card-issuing banks. [Ref, page 8, lines 28 to page 9, line 21] 

The third element is the payment card system that has a customer identifier 
that is without customer identity data, the customer identifier maps to a plurality of 
bankcard data of the customer in the payment card system. The customer identifier 
30 is encoded to be an encoded customer identifier when encoded with an algorithm 
from a list of such algorithms in a database maintained by the payment card system 
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and then embeds a reference code that references the algorithm, the encoded 
customer identifier is then encoded on a payment card encoding mechanism, 
wherein the payment card and the CPIN is used by the customer at a merchant point 
of sale (POS) of a merchant system for conducting a payment transaction. 
5 [Ref., page 17, line 24 to page 18, line 2] 

Using these three elements, the payment card system of the claimed subject 
matter enables payment to merchants without having to distribute and copy 
customer identity and bankcard data to their record and systems, from where it has 
10 been subject to theft from their systems as had been covered in many news items. 
Instead the customer identity and bankcard data is stored in an encrypted form in a 
central payment card system and decrypted for use at the time of the actual 
payment transactions. 

15 Further, the payment card system of the claimed subject matter, as described 

above operates within the existing payment infrastructure that includes the merchant 
point of sale systems and the card-issuing banks, without changing their operation or 
interfaces. Hence the operation of the payment card system is transparent to both 
the merchant sales systems and the card-issuing banks. 

20 

Concise explanation of subject matter in claims involved in the appeal: 

The following states a concise explanation of the subject matter defined in 
each of the independent claims involved in the appeal. The independent claims are: 
106, 109, 114, and 123, for which a concise explanation is being identified here by 
25 reference to page number, line number, and Figure number and by references 
numbers where applicable. 
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Claim 106 

The claim teaches a method of protecting from theft and misuse banl<card 
data from merchant computer systems and securely selecting any one of a plurality 
of bankcards of a customer at a merchant point of sale interface for a payment 
5 transaction to a merchant comprising the steps of: 

a. enabling selecting a debit card transaction requiring entry of a PIN in a 
merchant point of sale (POS) interface, enabling entering of (i) a customer identifier, 
without customer Identity data, by a payment card that encodes the customer 
identifier and (ii) a bankcard specific personal identification number (CPIN) in the 

10 merchant point of sale (POS) interface; [Ref., page 7, lines 20 to page 9, line 21] 

b. enabling sending the customer identifier and the CPIN to an adapted 
prior art merchant gateway, along with the payment transaction data that includes a 
merchant identifier and a payment amount; [Ref., page 7, lines 20 to page 9, line 
21] 

15 c. interfacing by the adapted prior art merchant gateway with a payment 

card system, and sending to the payment card system the customer identifier and 
the CPIN; [Ref., page 7, lines 20 to page 9, line 21] 

d. having stored customer bankcard data in the payment card system, 
wherein, each bankcard is identified with a separate CPIN, identifying a particular 

20 bankcard data of the customer and verifying the customer by the bankcard specific 
CPIN in the payment card system; [Ref., page 7, lines 20 to page 9, line 21] 

e. returning to the adapted prior art merchant gateway the bankcard data 
corresponding to the customer identifier and the CPIN from the payment card 
system; [Ref., page 7, lines 20 to page 9, line 21] 

25 f. assembling by the adapted prior art merchant gateway, a payment 

transaction record to include the bankcard data from the payment card system and 
the payment transaction data, and by submitting the payment transaction record to a 
bankcard authorization network, wherein the method does not transfer bankcard 
identity data to the merchant computer systems. [Ref., page 7, lines 20 to page 9, 

30 line 21] 
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Claim 109: 

The claim teaches a payment card system and that protects private data of a 
customer from theft and misuse from merchant computer systems in customer to 
5 merchant payment transactions, comprising: 

a. a payment card with a substrate; [Ref., page 6, line 29 to page 7, line 

10] 

b. a customer identifier that is without customer identity data, the 
customer identifier maps to the payment card system; [ Ref., page 16, line 10 to 

10 line 16] 

c. the customer identifier is encoded to be an encoded customer 
identifier when the customer identifier is encoded with an algorithm in the payment 
card system and then embeds a reference code that references the algorithm; [ 
Ref., page 17, line 24 to page 18, line 2] 

1 5 d. the substrate encoded with the encoded customer identifier and the 

substrate printed with an alias name selected by the customer. [Ref., page 18, line 
21 to page 20, line 10, and page 16, line 10 to line 16] 

Claim 114: 

20 This claim teaches a method of conducting a payment transaction that 

protects the privacy of customer identity and bankcard data, from theft and misuse • 
from merchant computer systems, having the steps of: 

a. enabling creating a customer identifier that is without customer identity 
data, the customer identifier maps to a payment card system; [ Ref., page 16, line 

25 10 to page 18, line 2] 

b. encoding the customer identifier with an algorithm, and then 
embedding a reference code that references the algorithm in the payment card 
system, thus getting an encoded customer identifier; [ Ref., page 17, line 24 to 
page 18, line 2] 
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c. delivering to a customer, a payment card with a substrate printed with 
an alias name selected by the customer and encoded with the encoded customer 
identifier. [Ref., page 6, line 29 to page 7, line 10] 



5 Claim 123: 

This claim teaches a payment security system that provides identity security 
in use of bankcards, from merchant computer systems, comprising: 

a. a customer identifier that is without customer identity data; [Ref., page 
6, line 29 to page 7, line 10] 

10 b. the customer identifier maps to a plurality of bankcard data of the 

customer, each bankcard data identified with a card specific personal identification 
number (CPIN) in the payment security system; [ Ref., page 11, line 12 to page 13, 
line 16] < 

c. the customer identifier is encoded to be an encoded customer identifier 

15 when encoded with an algorithm from a list of such algorithms in a database 

maintained by the payment security system and then embeds a reference code that 
references the algorithm, the encoded customer identifier is then encoded on a 
payment card encoding mechanism, wherein the payment card and the CPIN is 
used by the customer at a merchant point of sale (POS) of a merchant system for 

20 conducting a payment transaction. [Ref., page 17, line 24 to page 18, line 2] 



(6) GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 
GROUND #1: 

5 Rejected claims 1 09-1 10,112,115-116, under 35 USC 1 03(a) as being 

unpatentable over Rose et al. Rejected claims 111, under 35 USC 103(a) as being 
unpatentable over Rose et al, in view of Campisano. Rejected claims 106-108, 
under 35 USC 103(a) as being unpatentable over Rose et al, in view of Campisano, 
further in view of Duyck and Low et al. Rejected claims 113, under 35 USC 103(a) 

10 as being unpatentable over Rose et al in view of Campisano and Low et al, claims 
117, under 35 USC 103(a) as being unpatentable over Rose et al in view of Low et 
al. Rejected claims 118-120, under 35 USC 103(a) as being unpatentable over Rose 
et al in view of Albert and Duyck. 

Rejected claim 121 over Rose in view of Albert, and Duyck, and in view of 

15 Campisano and Gillin et al, claim 122 over Rose in view of Albert, Duyck, 

Campisano and Gillin and Low et al, claim 124 over Rose in view of Campisano and 
Low et al. 

Appellant submits such rejections are improper under 35 USC 103(a) and 
Graham v. Deere which governs determination of obviousness by the USPTO. 

20 

GROUND #2: 

Examiner misunderstands and mis-cites KSR v. Teleflex . and its seven 
rationales to support 103 (a) rejections, under an obviousness enquiry. 

25 GROUND #3: 

Examiner misconstrues and misunderstands the nature and scope of the 
claimed subject matter" as used in the claims in light of the specification and thus 
has erred in applying the "Broadest reasonable construction" standard and as a 
basis for 103(a) obviousness rejection. 
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(7) ARGUMENT 



GROUND #1: 

5 

Appellant's Arguments: 

Rose and Campisano are the major or primary cited prior arts underlying all of 
these 103(a) rejections and hence would be analyzed first. 
What Rose and Camoisano teach and do not teach 

10 The primary prior art cited for obviousness rejection by the examiner is Rose 

et al. Rose art is on a Rose payment card. Rose teaches different embodiments of 
the Rose payment card, as illustrated in Rose Figures 2 to 3A-E. These Rose 
embodiments cover from a blank card to a decorative card, to a card with or without 
a bank name, and a card where the customer can etch or write his name initials. 

15 These different embodiments do not display the customer name and or bankcard 
number. Rose et al further teaches a payment card, which has a code on the card. 
The code is associated with multiple bank accounts in a database at a remote 
location. 

20 When the Rose payment card is used at an ATM/POS, the code from the 

card is read and routed to the database at the remote location. The database 
matches the code, and the database returns the identity of each account in the 
database to the ATM/POS to be displayed on the ATM/POS screen, along with the 
PIN of each account. The user is then asked to select from this list of accounts, a 

25 specific account to be used for this transaction and then asked to enter the 

corresponding PIN for that account in the ATM/POS. The ATM/POS logic itself then 
matches the entered PIN to identify the specific customer account and then forwards 
that specific account data to merchant systems and records for normal prior art 
payment transaction processing by the merchant. 

30 
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What Rose does not teach and the distinguishing feature of the claimed 
subject matter payment card system is that in the claimed subject matter, a payment 
card system database that maintains customer bank account data does not return 
the customer bank data to the merchant ATM/POS and to the merchant systems for 
5 creation of a payment authorization record, because an essential aspect of the 
claimed subject matter is that the claimed payment card system protects the 
customer id and bank data from the merchant systems themselves, from where it 
has been subject to theft in the interconnected systems of the Internet and via other 
ways, based on many news items in the last many years. 

10 

The next major cited prior art is Campisano. This prior art is very similar to 
Rose, except in Campisano, instead of a payment card or a bankcard, a customer 
identifier in the form of customer's telephone number is used by entering that in the 
ATM/POS. Campisano art is on a card-less payment system for credit card 

15 transactions. To be able to provide a card-less payment system that does not use a 
credit card, Campisano teaches a card-less payment system that uses an entry of 
the user's telephone number combined with a PIN, in lieu of his/her physical 
bankcard at a point of sale terminal. The telephone number and the PIN are linked to 
the card number in a card database that may be maintained by the card-issuing 

20 bank or the telephone company, as they have the ability to verify the telephone 

number. The actual bankcard data from the card database is then transferred to the 
merchant systems for the merchant to process a payment transaction. 

The Rose and Campisano prior art, individually and in combination while 
25 teach convenience in use of bankcards and protection of customer data on the 
bankcard itself and teach use of a remote database that maintains customer bank 
account data, referenced by a customer identifier that would be on the pseudo 
bankcard, they do not teach or even fairly suggest under the Graham v. Deere 
obviousness enquiry and analysis, the claimed subject matter which accomplishes a 
30 very different objectives, that of security from theft of the customer data from the 
merchant computer systems themselves. 
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Before Appellant responds to each of the various obviousness rejections, 
appellant would first address the KSR and Graham ordinary skill in the art 
obviousness enquiry argument, given these cited prior art to one of ordinary skill in 
5 the art. 



As a matter of general knowledge and related to the ordinary skill in the art 
enquiry that is related to bankcard driven payments systems, a bankcard payment 
infrastructure, requires that the bankcard data from the customer that includes 

10 customer identity data such as name, card expiration and bank name and account 
number be transferred over to merchant computer systems and records via a 
merchant point-of-sale (POS) interface. After the bankcard data has been 
transferred or read into the merchant computer systems, a payment authorization 
request record is created by the merchant computer systems. That payment 

15 authorization request record combines in this payment authorization request record, 
(i) the customer bankcard data (ii) a payment amount, (iii) merchant identifier, and 
(iv) transaction identifiers, or meta data such as date, time, and reference number. 

This payment authorization request record is then sent or routed to a card- 
20 issuing bank via a card authorization network for processing and approving a 

payment transaction from the customer to the merchant. These prior arts Rose and 
Campisano cited by the examiner use the same bankcard payment infrastructure 
and by necessity copy the customer data to the merchant systems. 

25 Rose and Campisano prior art underlie all of the various obviousness 

rejections. Therefore, these prior arts are examined in detail first for the obviousness 
and ordinary skill in the art enquiry issue. 

In claim 106, elements (b), (c) and (e) are neither taught nor even fairly 
30 suggested by Rose and Campisano, given Rose and Campisano analysis above. 
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Hence under the nature and scope of the claims and in view of ordinary skill in the 
art, claim 106 cannot be obvious over this cited art. 

In claim 109, elements (b) and (c) are neither taught nor even fairly suggested 
5 by Rose and Campisano, given Rose and Campisano analysis above. Hence under 
the nature and scope of the claims and in view of ordinary skill in the art, claim 109 
cannot be obvious over this cited art. 

In claim 114, elements (b) is neither taught nor even fairly suggested by Rose 
10 and Campisano, given Rose and Campisano analysis above. Hence under the 
nature and scope of the claims and in view of ordinary skill in the art, claim 114 
cannot be obvious over this cited art. 

In claim 123, element (c) is neither taught nor even fairly suggested by Rose 
15 and Campisano, given Rose and Campisano analysis above. Hence under the 
nature and scope of the claims and in view of ordinary skill in the art, claim 123 
cannot be obvious over this cited art. 

First, In contrast to the cited prior art, the claimed subject matter independent 
20 claims 106, 109, 114 and 123 teach a payment card system with a customer 

identifier, that is, first without customer identity data and then second, that customer 
identifier is encoded by reference to an algorithm to make even the customer 
identifier to be not on the card itself, but an encoded customer identifier, encoded in 
a specific manner that embeds a reference to an algorithm after the customer 
25 identifier is encoded with this specific algorithm. 

These above described features related to protecting even a customer 
identifier without identity data, not relate to a customer in the database are not 
obvious over the cited art and would not have been obvious to those with ordinary 
30 skill in the art as those with the ordinary skill in the art were providing convenience in 
use of bankcards and not additional security of an already anonymous customer 
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identifier without customer identity with a reference to a coding algorithm maintained 
in the database, that codes the anonymous customer identifier on the card itself 
before encoding it on the card and before delivery of the card to the customer. 



5 To those of the ordinary skill in the art, this additional security measure as 

applied to the already anonymous customer identifier on the pseudo prior art 
bankcards serves no purpose as this measure is directed to security in the payment 
card system. 

10 Second, in contrast, the current application claims 106, 109, 1 14, 123 and 

their dependent claims, protect the customer id data from theft and misuse from the 
merchant computer systems themselves, while enabling a payment transaction with 
the help of the same merchant computer systems, including the existing POS 
interfaces, by not transferring customer identity and bankcard data to merchant 

15 computer systems in the first place. 

This is accomplished by an adapted prior art merchant gateway. A prior art 
merchant gateway is simply a router or a router mechanism that routes payment 
authorization requests from merchants globally to the card authorization network 
20 globally based on the first four digits of a bankcard number and routes the 

corresponding payment approval records from the card authorization network to the 
merchants. The claimed subject matter teach modification or adaptation of that prior 
art merchant gateway to accomplish the objectives of the claimed subject matter. 

25 The adapted prior art merchant gateway operates, (i) to receive a payment 

authorization request record from a merchant (ii) filter a payment card originated 
payment transaction record from other bankcard driven payment transaction 
records, (iii) temporarily hold the payment card originated transaction record in hold 
status and route from this transaction, only the encoded customer identifier and the 

30 CPIN to a payment card system, (iv) receive from the payment card system the 
actual customer bankcard data, (v) then assemble a payment authorization request 
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record with the actual customer bankcard data and (vi) end the hold by submitting 
this assembled payment authorization request record to a card authorization network 
and receive a payment authorization approval record from the card-issuing bank, 
and (vii) forward the payment approval record received from the card-issuing bank to 
5 the merchant systems. 

While the steps (ii) to (v), as above define the specific adaptation of the prior 
art merchant gateway, including its interface to the payment card system, the steps 
(i) and (vii) do not alter existing merchant system interface to this adapted prior art 
10 merchant gateway and step (vi) does not alter the existing interfaces of the adapted 
prior art merchant gateway to the card authorization network. 

Hence, the adapted prior art merchant gateway, as described above, is 
transparent in its operation to the merchants and the card authorization network, 
15 while protecting the customer identity and bankcard data from the merchant 
systems. 

Those with the ordinary skill in the art at that time, were not solving the issue 
of keeping the customer bankcard data from theft and misuse in the merchant 

20 computer systems themselves, and these prior art do not teach or fairly suggest to 
one of the ordinary skill in the art, that the customer data having being received by 
the Merchant POS is subject to theft from these systems and need to be protected 
from the merchant systems themselves, as in addition to the merchant misusing the 
customer data, the data may be subject to theft from the interconnected via internet 

25 merchant computer systems as has been covered in many news stories, since the 
current application was filed. 

The theft of data from the merchant computer systems was an issue that did 
not exist for those of the ordinary skill in the art, as their effort was directed for 
30 making improvements in the bankcard itself and improvements in the merchant 
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POS, and it was not directed to protecting bankcard customer identity data against 
theft and misuse from the merchant computer systems themselves. 

Given that these cited prior art in any combination did not alter or change the 
5 underlying bankcard driven payment mechanism, as described earlier, from these 
prior art citations, the ordinary skills in the art pertain to computer networks, 
databases, and systems, specifically for the payment systems that includes the use 
of bankcards. To them, the issue of protecting the customer identity data from theft 
and misuse from the merchant computer systems was not an issue and thus not 
10 obvious as an issue to be addressed. 

The claimed subject matter, while using the same merchant point of sale 
interfaces and merchant computer systems do not transfer customer identity data to 
these same merchant computer systems, a novel and non-obvious accomplishment 
15 in itself and over the cited art. And this cited art to those with ordinary skill in the art, 
for the reasons as detailed above does not make obvious the protection of the 
customer identity and bankcard data from theft and misuse from the merchant 
computer systems themselves. 

20 Second, in contrast the merchant gateway adapted to perform the function of 

a logic to separate payment cards from a bankcard and then interfacing with a 
payment card system to fetch customer bankcard data and then assembling a 
complete payment auth request record are neither taught or even fairly suggested in 
the cited prior art. 

25 

Now analyzing other cited prior art: Low et al is a very different art in how it 
accomplishes its stated objective of anonymous credit card transactions. Analyzing 
Low et al, Low teaches anonymous credit card transactions without disclosing the 
subject matter of the transaction to the institution providing the credit card (from Low 
30 Abstract). 
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From Low Figure 2, col. 3, lines 21 to col. 4, lines 24, Low creates two 
independent card-issuing bank entities, identified as Be 203 and Bp 213, where Be 
knows the customer identity and issues the anonymous card, and Bp, the bank that 
only manages money or credits that have been deposited in the account, and only 

5 knows the customer by a anonymous identifier. These pseudo banks Be and Bp 
interface with each other via an intermediary central bank Cx and the merchant bank 
Bs 237 via the same intermediary central bank Cx 227. The central bank Cx 
exchanges messages between Be, Bp and Bs using public key cryptography, 
without each of them knowing the true identity of each other but only a cryptographic 

10 identity, where each bank uses a cryptographic identification. Be sends messages 
to Bp via Cx to transfer funds or credits and Bp sends messages to Bs via Cx to 
transfer funds. 



Low for its operation requires a smart card as it stores Bp cryptographic 
15 address, receives and stores Bp cryptographic address and fund amount for 

transferring them to Cx. The crypto address of Bp is already on the anonymous card 
and the crypto address of the merchant bank and the purchase amount is copied to 
the card at the merchant sale terminal and the card then transfers these two crypto 
addresses and the fund amount to the central bank Cx 227 via message 233. This 
20 enables the central bank Cx 227 to transfer funds from the bank Bp to merchant 
bank Bs. When the Bank Bs notifies the merchant S 245, the merchant then 
releases the goods to the customer. 

While Be may appear to be like current invention payment card system, it is 
25 not as Be creates and sends itemized account statements to the customer, whereas 
current invention payment card system only delivers the payment card to the 
customer. Also there is no equivalent of Low's Bp, Cx, smart card, and use of public 
key cryptography in the current invention. Furthermore, Low would require unique to 
Low Merchant POS that provide merchant bank's cryptographic identity the credit 
30 card of the customer, along with a dollar purchase amount for transfer to the central 
bank Cx. 
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Low does not teach features of claim 106 to 124 that use existing merchant 
POS and merchant systems and existing card authorization networks and an 
adapted merchant gateway to protect customer id data from the merchant computer 
5 systems. Hence Low is wholly different in every aspect from the claimed subject 
matter. Thus Low does not make obvious any of the independent claims from 106- 
124, and thus also any of their dependent claims 

RESPONSE TO VARIOUS 103(a) OBVIOUSNESS REJECTIONS 

10 Each of the various obviousness rejections is responded to as follows in light 

of the above arguments. 

Claim 106-108 103(a) rejection 

Examiner had rejected under 35 USC 103(a) obvious rejections, claims 106 
15 and 108 as being obvious over Rose et al in view of Campisano and further in view 
of Duyck, and further in view of Low et al. 

These claims would not be obvious to those with ordinary skill in the art in view 
of arguments above related to Rose and Campisano. The additional citations do not 
teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 
20 features of claims 1 06 and 1 08, for the reasons as described above. 

Claim 107, 103(a) rejection 

Examiner had rejected under 35 USC 103(a) obvious rejections, the claim 
107 as being obvious over Rose et al in view of Campisano, in view of Duyck, and 
25 further in view of Low et al, and further in view of Kramer... 

These claims would not be obvious to those with ordinary skill in the art in view 
of arguments above related to Rose and Campisano. The additional citations do not 
teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 
features of claim 107 for the reasons as described above. 

30 
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Claim 109-110, 114, and 123, 103(a) rejection 

Examiner had rejected under 35 USC 103(a) obvious rejections, claims 109- 
110, 114 and 123 as being obvious over Rose et al. 

These claims would not be obvious to those with ordinary skill in the art in view 
5 of arguments above related to Rose and Campisano. The additional citations do not 
teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 
features of claims 109-1 10, 114 and 123 for the reasons as described above. 

Claim 112, 115-116, 103(a) rejection 

10 Examiner had rejected under 35 USC 1 03(a) obvious rejections, claims 1 1 2, 

1 1 5-1 1 6 as being obvious over Rose et al in view of Campisano. 

These claims would not be obvious to those with ordinary skill in the art in view 
of arguments above related to Rose and Campisano. The additional citations do not 
teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 

15 features of claims 112, 115-116 for the reasons as described above. 

Claim 111, 103(a) rejection ' 

Examiner had rejected under 35 USC 103(a) obvious rejections, claims 111, 
as being obvious over Rose et al as applied to claim 109 and further in view of 
20 Campisano. 

These claims would not be obvious to those with ordinary skill in the art in view 
of arguments above related to Rose and Campisano. The additional citations do not 
teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 
features of claims 1 1 1 for the reasons as described above. 

25 

Claim 113, 103(a) rejection 

Examiner had rejected under 35 USC 103(a) obvious rejection, claims 113, 
as being obvious over Rose et al as applied to claims 109, 112 and further in view of 
Campisano and Low et al. 
30 These claims would not be obvious to those with ordinary skill in the art in view 

of arguments above related to Rose and Campisano. The additional citations do not 
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teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 
features of claim 1 13 for the reasons as described above. 

Claim 117, 103(a) rejection 

5 Examiner had rejected under 35 USC 103(a) obvious rejection, claims 117, 

as being obvious over Rose et al as applied to claims 114-116 and further in view of 
Low et al. 

These claims would not be obvious to those with ordinary skill in the art in view 
of arguments above related to Rose and Campisano. The additional citations do not 
10 teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 
features of claim 1 17 for the reasons as described above. 

Claim 118-120, 103(a) rejection 

Examiner had rejected under 35 USC 103(a) obvious rejection, claims 1 1S- 
IS 120, as being obvious over Rose et al as applied to claims 114 and further in view of 
Albert et al and Duyck. 

These claims would not be obvious to those with ordinary skill in the art in view 
of arguments above related to Rose and Campisano. The additional citations do not 
teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 
20 features of claims 1 18-120 for the reasons as described above. 

Claim 121, 103(a) rejection 

Examiner had rejected under 35 USC 103(a) obvious rejection, claims 121 , 
as being obvious over Rose et al as applied to claims 114 and further in view of 
25 Albert et al and Duyck as applied to claims 1 18-120 above and further in view of 
Campisano and Gillin et al. 

These claims would not be obvious to those with ordinary skill in the art in view 
of arguments above related to Rose and Campisano. The additional citations do not 
teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 
30 features of claim 121 for the reasons as described above. 
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Claim 122, 103(a) rejection 

Examiner had rejected under 35 USC 103(a) obvious rejection, claims 122, 
as being obvious over Rose et al as applied to claims 114 and further in view of 
Albert et al and Duyck as applied to claims 1 18-120 above and further in view of 
5 Campisano and Gillin et al as applied to claim 121 above and further in view of Low 
etal. 

These claims would not be obvious to those with ordinary skill in the art in view 
of arguments above related to Rose and Campisano. The additional citations do not 
teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 
10 featuresof claims 122, 114, 118-120, and 121 for the reasons as described above. 

Claim 124, 103(a) rejection 

Examiner had rejected under 35 USC 103(a) obvious rejections, claims 124, 
as being obvious over Rose et al as applied to claims 123 above and further in view 
15 of Campisano and Low et al. 

These claims would not be obvious to those with ordinary skill in the art in view 
of arguments above related to Rose and Campisano. The additional citations do not 
teach or fairly suggest, or would be obvious to those with ordinary skill in the art, the 
features of claim 124 for the reasons as described above. 
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GROUND #2 

Examiner misunderstands and mis-cites KSR v. Teleflex , and its seven 
rationales to support 103 (a) rejections, under an obviousness enquiry. 



Appellant's Arguments: 

KSR did not change Graham v. Deere , the applicable law of obviousness, but 
clarified the application of Graham V. Deere test of obviousness, in those 
obviousness enquiry cases that combine known elements according to known 
10 methods that yield predictable results that are in the purview of those with ordinary 
skill in the art. 



The claimed subject matter do not provide known elements according to 
known methods as the scope of claims and the prior art cited by the examiner make 

15 it clear that those with ordinary skill in the art at that time were focused on providing 
convenience in use of bankcards and prevent theft of bankcards from the customer's 
possession. The prior art of record shows that those with the ordinary skill in the art 
at that time were not trying to provide security by protecting the bankcard identity 
data from the merchants and merchant sale systems themselves. Security of 

20 bankcard data from the merchants themselves due to theft and compromise from 
their systems was not an issue to be solved in year 2001 in the purview of those with 
ordinary skill in the art at that time. 

Therefore, Applicant submits that the claims 106 to 124 are not obvious over 
25 these prior arts, where these prior art individually or in any combination do not teach 
or suggest the invention in these claims and would not be obvious to those of 
ordinary skill at that time. 



30 
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GROUND #3: 

Examiner misconstrues and mis understands the nature and scope of the 
claimed subject matter" as used in the claims in light of the specification and thus 
has erred in applying the "Broadest reasonable construction" standard and as a 
5 basis for 103(a) obviousness rejection. 

Appellant's Arguments: 

Examiner by equating claim phrase "adapted prior art merchant gateway with 
a merchant system" as used in the claims in light of the specification has erred in 
10 applying the "Broadest reasonable construction" standard and as a basis for 103(a) 
obviousness rejection. 

Examiner by equating claim phrase "a customer identifier, without customer 
identity data, and a payment card that encodes the customer identifier" as used in 
the claims in light of the specification with prior art encoding of customer identity 
15 data in the magnetic strip, and thus has erred in applying the "Broadest reasonable 
construction" standard and as a basis for 103(a) obviousness rejection. 

The Patent and Trademark Office ("PTO") determines the scope of claims in 
patent applications not solely on the basis of the claim language, but upon giving 
claims their broadest reasonable construction "in light of the specification as it would 
20 be interpreted by one of ordinary skill in the art." In re Am. Acad. ofSci. Tech. Ctr., 
367 F.3d 1359, 1364[, 70 USPQ2d 1827] (Fed. Cir. 2004). 

Examiner misconstrues and mis understands the nature and scope of the 
claimed subject matter" as used in the claims in light of the specification and thus 
has erred in applying the "Broadest reasonable construction" standard and as a 
25 basis for 103(a) obviousness rejection. 

Examiner by equating claim phrase "a customer identifier, without customer 
identity data, and a payment card that encodes the customer identifier" as used in 
the claims in light of the specification with prior art encoding of customer identity. 
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data in the magnetic strip, and thus has erred in applying the "Broadest reasonable 
construction" standard and as a basis for 103(a) obviousness rejection. 

Examiner by equating claim phrase "adapted prior art merchant gateway with 
a merchant system" as used in the claims in light of the specification has erred in 
5 applying the "Broadest reasonable construction" standard and as a basis for 1 03(a) 
obviousness rejection. 

Hence, the scope and content of prior art and the differences between the 
claimed invention and the prior art are such that the current invention has an entirely 
different scope than the prior art. 

10 
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(8) CLAIMS APPENDIX 

Claims involved in this appeal are: 

5 Claims 1 to 105 (cancelled) 

106. A method of protecting from theft and misuse bankcard data from merchant 
computer systems and securely selecting any one of a plurality of bankcards of a 
customer at a merchant point of sale interface for a payment transaction to a 
10 merchant comprising the steps of: 

a. enabling selecting a debit card transaction requiring entry of a PIN in a 
merchant point of sale (POS) interface, enabling entering of (i) a customer identifier, 
without customer identity data, by a payment card that encodes the customer 
identifier and (ii) a bankcard specific personal identification number (CPIN) in the 

15 merchant point of sale (POS) interface; 

b. enabling sending the customer identifier and the CPIN to an adapted 
prior art merchant gateway, along with the payment transaction data that includes a 
merchant identifier and a payment amount; 

c. interfacing by the adapted prior art merchant gateway with a payment 
20 card system, and sending to the payment card system the customer identifier and 

the CPIN; 

d. having stored customer bankcard data in the payment card system, 
wherein, each bankcard is identified with a separate CPIN, identifying a particular 
bankcard data of the customer and verifying the customer by the bankcard specific 

25 CPIN in the payment card system; 

e. returning to the adapted prior art merchant gateway the bankcard data 
corresponding to the customer identifier and the CPIN from the payment card 
system; 

f. assembling by the adapted prior art merchant gateway, a payment 
30 transaction record to include the bankcard data from the payment card system and 

the payment transaction data, and by submitting the payment transaction record to a 
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bankcard authorization network, wherein the method does not transfer bankcard 
identity data to the merchant computer systems. 

107. The method as in claim 106, comprising further steps of: 

5 encoding the customer identifier without customer identity data on the 

payment card with an algorithm and decoding the customer identifier with the 
algorithm in the payment card system to get the customer identifier. 

108. The method as in claim 106, comprising further steps of: 
10 a. delivering the payment card to the customer; 

b. enabling entering the bankcard data and self-selecting a CPIN for each 
of the bankcards of the customer in the payment card system. 

109. A payment card system and that protects private data of a customer from 
15 theft and misuse from merchant computer systems in customer to merchant 

payment transactions, comprising: 

a. a payment card with a substrate; 

b. a customer identifier that is without customer identity data, the 
customer identifier maps to the payment card system; 

20 c. the customer identifier is encoded to be an encoded customer 

identifier when the customer identifier is encoded with an algorithm in the payment 
card system and then embeds a reference code that references the algorithm; 

d. the substrate encoded with the encoded customer identifier and the 
substrate printed with an alias name selected by the customer. 

25 

110. The payment card system as in claim 109, comprising: 
the encoding medium is a magnetic strip. 

111. The payment card system as in claim 109, comprising: 
30 the customer-identifier is self-created by the customer. 



112. The payment card system as in claim 1 09, further comprising: 

a. the encoded customer identifier from the payment card used for a 
payment transaction at a merchant point of sale (POS), along with entry of a 
bankcard specific personal identification number (CPIN) by the customer are routed 

5 from the POS to an adapted prior art merchant gateway, the adaptation in the prior 
art merchant gateway routes the encoded customer identifier and the CPIN to the 
payment card system; 

b. the payment card system decodes the encoded customer identifier 
using the algorithm that is referenced by the code present in the encoded customer 

10 identifier, the payment card system then maps the customer identifier and the CPIN 
to retrieve a specific bankcard data and returns the specific bankcard data to the 
adapted prior art merchant gateway. 

113. The payment card system as in claim 112, further comprising: 
the adapted prior art merchant gateway, after receiving the specific bankcard 

data from the payment system, assembles a payment transaction record using the 
specific bankcard data for submission of the payment transaction record to a 
bankcard authorization network, thereby the payment card operating with the 
payment card system does not transfer customer identity data to the merchant 
computer systems. 

114. A method of conducting a payment transaction that protects the privacy of 
customer identity and bankcard data, from theft and misuse from merchant computer 
systems, comprising the steps of: 

25 a. enabling creating a customer identifier that is without customer identity 

data, the customer identifier maps to a payment card system; 

b. encoding the customer identifier with an algorithm, and then 
embedding a reference code that references the algorithm in the payment card 
system, thus getting an encoded customer identifier; 
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c. delivering to a customer, a payment card with a substrate printed with 
an alias name selected by the customer and encoded with the encoded customer 
identifier. 



5 115. The method as in claim 114, further comprising the steps of: 

a. enabling using the payment card for the payment transaction at a 
merchant point of sale (POS) and entering a bankcard specific personal 
identification number (CPIN) by the customer; 

b. enabling the POS routing a payment transaction record to an adapted 
10 prior art merchant gateway; 

c. enabling identifying the use of the payment card at the POS, by the 
adapted prior art merchant gateway, and routing the encoded customer identifier 
and the CPIN of the payment transaction to the payment card system. 

15 116. The method as in claim 115, further comprising the steps of: 

decoding the encoded customer identifier by the payment card system using 
the algorithm that is referenced by the code in the encoded customer identifier, and 
using the customer identifier and the CPIN, retrieving specific bankcard data in the 
payment card system, and returning to the adapted prior art merchant gateway. 

20 

1 1 7. The method as in claim 1 1 6, further comprising the steps of: 

enabling the adapted prior art merchant gateway, after receiving the specific 
bankcard data from the adapted prior art merchant gateway, to assemble a payment 
transaction record with the specific bankcard data for submitting the payment 
25 transaction record to a bankcard authorization network, wherein the payment card 
does not transfer customer identity data to the merchant computer systems. 



30 118. The method as in claim 114, further comprising the steps of: 
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a. enabling using the payment card for the paynnent transaction at a 
merchant point of sale (POS) and enabling entering a bankcard specific personal 
identification number (CPIN) by the customer; 

b. connecting wirelessly by the merchant POS to the payment card 

5 system for routing a payment transaction record that includes a payment amount, a 
merchant identifier, a reference number, the encoded customer identifier, and the 
CPIN. 

1 1 9. The method as in claim 1 1 8, further comprising the steps of: 

10 receiving wirelessly the payment transaction record by the payment card 

system. 

120. The method as in claim 119, further comprising the steps of: 

decoding the encoded customer identifier by the payment card system using 
15 the algorithm that is referenced by the code in the encoded customer identifier, and 
using the customer identifier and the CPIN, retrieving specific bankcard data in the 
payment card system. 

121. The method as in claim 120, further comprising the steps of: 

20 assembling a payment transaction record with the specific bankcard data, the 

payment transaction record includes, a customer name, a bankcard number, an 
expiration date, the merchant identifier, the payment amount, and the reference 
number, and submitting the payment transaction record to a card authorization 
network via ajiadapted prior art merchant gateway. 

25 

122. The method as in claim 121, further comprising the steps of: 

receiving a payment approval record by the payment card system from the 
card authorization network via the adapted prior art merchant gateway, the payment 
approval record includes the reference number, the payment amount and a payment 
30 authorization number, and forwarding wirelessly the payment approval record to the 
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merchant POS, wherein the payment card does not transfer customer identity and 
bankcard data to the merchant computer systems. 

123. A payment security system that provides identity security in use of bankcards, 
5 from merchant computer systems, comprising: 

a. a customer identifier that is without customer identity data; 

b. the customer identifier maps to a plurality of bankcard data of the 
customer, each bankcard data identified with a card specific personal identification 
number (CPIN) in the payment security system; 

10 c. the customer identifier is encoded to be an encoded customer identifier 

when encoded with an algorithm from a list of such algorithms in a database 
maintained by the payment security system and then embeds a reference code that 
references the algorithm, the encoded customer identifier is then encoded on a 
payment card encoding mechanism, wherein the payment card and the CPIN is 

15 used by the customer at a merchant point of sale (POS) of a merchant system for 
conducting a payment transaction. 

124. The payment security system as in claim 123, further comprising: 

on swiping of the payment card and entry of the CPIN, the payment security 
20 system receives from the merchant POS, the encoded customer identifier and the 
CPIN, decodes the encoded customer identifier, using the customer identifier and 
the CPIN selects the specific bankcard data of the customer for processing the 
payment transaction with a bankcard processing network, wherein, the security 
system does not transfer the customer identity and customer bankcard data to the 
25 merchant computer systems. 
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(9) EVIDENCE APPENDIX 

None 

(10) RELATED PROCEEDINGS APPENDIX 

None 
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CONCLUSION 



Appellant submits, based on the arguments presented in this appeal, the 
5 current claimed subject matter is entirely of a different scope and the current claims 
106-124 are not obvious under section 35 USC 103(a) and Graham v. Deere test 
over the cited combination of the prior art, based on arguments presented in this 
appeal. 

1 0 Dated this the 29th day of March, 201 0 

Respectfully submitted, 



15 Tara Chand Singhal 

Appellant 

P O Box 5075 
Torrance, California 90510 
20 Telephone: (310) 540-4095 

Appeal_Brief 3-29-2010 
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